From 3a7cc8116cce947f5652e0e46f4d60d59bfb5717 Mon Sep 17 00:00:00 2001
From: seth <getchoo@tuta.io>
Date: Sun, 21 May 2023 21:20:28 -0400
Subject: atlas: start hosting miniflux

---
 hosts/atlas/nginx.nix | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 hosts/atlas/nginx.nix

(limited to 'hosts/atlas/nginx.nix')

diff --git a/hosts/atlas/nginx.nix b/hosts/atlas/nginx.nix
new file mode 100644
index 0000000..1fcfd45
--- /dev/null
+++ b/hosts/atlas/nginx.nix
@@ -0,0 +1,32 @@
+{config, ...}: {
+  networking.firewall.allowedTCPPorts = [80 443];
+
+  security.acme = {
+    acceptTerms = true;
+    defaults.email = "getchoo@tuta.io";
+  };
+
+  services.nginx = {
+    enable = true;
+
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts = let
+      mkProxy = endpoint: port: {
+        "${endpoint}" = {
+          proxyPass = "http://127.0.0.1:${port}";
+          proxyWebsockets = true;
+        };
+      };
+      inherit (config.networking) domain;
+    in {
+      "miniflux.${domain}" = {
+        enableACME = true;
+        locations = mkProxy "/" "7000";
+      };
+    };
+  };
+}
-- 
cgit v1.2.3